For this sign-in state after a remote lock, there is no online unlock option shown in the provided guidance. The supported path in the matching cases is to reset Windows from the Windows Recovery Environment.
Since Startup Repair did not fix it, System Restore only had a restore point created after the issue began, and the device already accepted the BitLocker recovery key, the remaining practical steps are:
- On the sign-in screen, select the power icon.
- Hold Shift and select Restart.
- In Windows Recovery, go to Troubleshoot > Advanced options.
- If personal files are not fully backed up, open Command Prompt.
- In Command Prompt, run
Notepad.exe. - In Notepad, select File > Open and use that dialog to copy important files to a USB drive before proceeding.
- Then go back and use Troubleshoot > Reset this PC.
Important:
- A reset removes apps and programs and they must be reinstalled afterward.
- If a full reset option is chosen, personal files can also be removed.
- BitLocker recovery can be required again during recovery steps, so keep the 48-digit recovery key available.
If the reset path continues to fail, use Microsoft support channels for Surface or account sign-in help. Support agents cannot send password reset links or directly change account details.
- Find or lock a lost Windows device
- Find or lock a lost Windows device
- Windows devices for home users, businesses, and schools with Microsoft-managed updates
- I accidentally locked my Laptop using my Microsoft account. - Microsoft Q&A
- My laptop is lost few days ago so i locked my device on windows portal now when i found it is showing [An administrator has restricted sign in.To sign in,make sure your device is connected to the internet,and have your administrator sign in first]now what - Microsoft Q&A
- Surface turns on but shows a red bar and an unlocked lock icon